The package includes tests, release notes for this version, a clear README, a declared MIT license, and only one runtime dependency. Security policy and scanning are absent, while recent activity is limited to three commits from one contributor, so future maintenance depends heavily on the author.
68%
Total Score
50
100
83
83
The package is young at 144 days old with two releases and a median interval of about 57 days. This shows some release activity but leaves limited evidence of long-term maintenance.
One contributor made all commits during the last three months, giving the project a bus factor of one and increasing abandonment risk if that contributor becomes unavailable.
Only three commits were recorded in the last three months, with one active maintainer. This indicates some recent maintenance but a modest activity level.
The repository has zero stars, forks, and watchers. This is weak supporting evidence of adoption, but it does not outweigh the package's tests and clear source structure.
Composer is used as a build tool, but no security scanning tools are configured, leaving automated security coverage unverified.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.